October 2011 - Darwin-dev - lists.apple.com

Re: task_for_pid fails with os/kern failure even with system.privilege.taskport
by Nico Weber 13 Oct '11

13 Oct '11

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=beta; h=mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type :content-transfer-encoding:x-system-of-record; bh=QoBbcY/y+L3GyL4hAMjbkG4oKy5o8AnHsptb4dgBQl4=; b=aU4Ji8NI7+6Vi2xyIM5j4/nedVu4j7Bt83qAHZl9Ftrt4wMWjdIRGeOKO2jjWovjEN ZV+1GPdM8VZwUVWhyq1w== Domainkey-signature: a=rsa-sha1; s=beta; d=google.com; c=nofws; q=dns; h=dkim-signature:mime-version:sender:in-reply-to:references:date: x-google-sender-auth:message-id:subject:from:to:cc:content-type: content-transfer-encoding:x-system-of-record; b=CHCoka4EqK46Y8Bi/WAewEOYQSCVmEN9Z00QiMCCahV5unIrigK1MXJyuVWoDBQkV 5SWh9x03sNPB+EdS1UbxA== Hi Ben, as far as I know, only apps signed with a certain Apple signature can call task_for_pid() on ports other than mach_task_self() without auth prompt, see http://lists.apple.com/archives/apple-cdsa/2008/Feb/msg00014.html If you only need to call task_for_pid() for processes you control, you can add code to these processes to let them send their mach_task_self() to your controlling program over mach IPC, and then call task_for_pid() on that from the controller. That's what we do for the task manager in chrome. Nico On Wed, Oct 12, 2011 at 9:33 AM, Ben Staveley-Taylor <ben.staveley-taylor(a)oracle.com> wrote: > I'm trying to use the task_for_pid() mach call. I've found several list posts and other items about the security requirements for this from 10.5 onwards and I believe I'm complying, but I just can't get it to work. Can anyone spot what I'm doing wrong? > > Setup: > ------ > > - Running on OS X 10.7.1 > - I created a new Cocoa application with the code snippets shown below. > - Info.plist contains: > <key>SecTaskAccess</key> > <array> > <string>allowed</string> > <string>safe</string> > </array> > - The app is codesigned using a self-signed certificate. > > Behaviour: > ---------- > > - If I sudo-run the app's executable in Terminal (i.e. Test.app/Contents/MacOS/test) directly, it works > - If I do the same without sudo, I get the output: > system.privilege.taskport acquired > com.apple.TextEdit pid is 2475 > Failed; machErr=(os/kern) failure (5) > > - If I run the .app bundle by double-clicking in Finder, or in Terminal using "open Test.app" or "sudo open Test.app" it also fails in the same way. > > So in the failure cases I'm told that I do have system.privilege.taskport rights, but task_for_pid() then fails. What vital step am I missing? > > Many thanks if you can help, > > Ben Staveley-Taylor > ben.staveley-taylor(a)oracle.com > > > > > Code: > ----- > > ProcessSerialNumber psn; > > // Get pid of TextEdit, assuming it is running > NSString *targetProcessBundle = @"com.apple.TextEdit"; > if (FindPSNForBundleID(targetProcessBundle, &psn) == noErr) { > > // I don't think this should be necessary, but done for verification > OSStatus osErr = AcquireTaskportRight(); > > if (osErr == noErr) > { > // Convert PSN to PID. > pid_t pid; > GetProcessPID( &psn, &pid ); > NSLog(@"%@ pid is %d", targetProcessBundle, pid); > > mach_port_t remoteTask = 0; > mach_error_t machErr = task_for_pid( mach_task_self(), pid, &remoteTask ); > > if (machErr == 0) { > NSLog(@"Success"); > } > else { > const char *msg = mach_error_string(machErr); > NSLog(@"Failed; machErr=%s (%d)", msg, (int)machErr); > } > } > } > > > > > OSStatus AcquireTaskportRight() { > > OSStatus stat = noErr; > AuthorizationItem taskport_item[] = { > {"system.privilege.taskport"},0,0,0 > }; > AuthorizationRights rights = {1, taskport_item}, *out_rights = NULL; > AuthorizationRef authRef; > AuthorizationFlags auth_flags = kAuthorizationFlagExtendRights | kAuthorizationFlagPreAuthorize; > > stat = AuthorizationCreate (NULL, kAuthorizationEmptyEnvironment, auth_flags, &authRef); > > if (stat == errAuthorizationSuccess) { > stat = AuthorizationCopyRights ( authRef, &rights, kAuthorizationEmptyEnvironment, auth_flags, &out_rights); > } > > if (stat == errAuthorizationSuccess) { > NSLog(@"system.privilege.taskport acquired"); > } > else { > NSLog(@"Failed to acquire system.privilege.taskport right. Error: %d", (int)stat); > } > > return stat; > } > > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > http://lists.apple.com/mailman/options/darwin-dev/thakis%40chromium.org > > This email sent to thakis(a)chromium.org > _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: task_for_pid fails with os/kern failure even with system.privilege.taskport
by Jean-Daniel Dupas 13 Oct '11

13 Oct '11

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: task_for_pid fails with os/kern failure even with system.privilege.taskport
by Ben Staveley-Taylor 13 Oct '11

13 Oct '11

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Thanks to all for your replies. I've tried Jean-Daniel's excellent lldb steps for fully trusting a self-signed certificate, and I have today also tried creating a different code signing certificate from an external CA (not a public one, just company test one, but still set up such that the Mac has an entry for the CA as a trusted root.) In both cases this has now removed the need to interactively authenticate once per login, but I still get the same problem as I have always had: if I run from Terminal using sudo, the task_for_pid() call succeeds. If I run any other way, either from Terminal not using sudo, or interactively from the Finder, I get told that I do have the correct privilege, but then the call fails. (Output from the code in my original post; I won't re-post it again) system.privilege.taskport acquired com.apple.TextEdit pid is <id> Failed; machErr=(os/kern) failure (5) Is there a way to get a bit more diagnostic info on what is causing the failure that might give me a clue? Thanks, -- Ben. On 13 Oct 2011, at 09:23, Jean-Daniel Dupas wrote: > Not true. It's perfectly possible to use a self signed cert, as long as it is properly installed. > > I'm using custom lldb build that required to be signed to works, and didn't have issue with a self signed cert. > > The instruction to sign lldb are available here. The interesting section is the one that start with: > > «The next steps are necessary on SnowLeopard, but are probably because of a bug > how Keychain Access makes certificates. > [Note: These also apply for Lion.]» _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: task_for_pid fails with os/kern failure even with system.privilege.taskport
by Jean-Daniel Dupas 13 Oct '11

13 Oct '11

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com As a side note, IIRC, the "safe" key is reserved by Apple and required the binary to be signed by an Apple certificate. Le 13 oct. 2011 à 10:23, Jean-Daniel Dupas a écrit : > Not true. It's perfectly possible to use a self signed cert, as long as it is properly installed. > > I'm using custom lldb build that required to be signed to works, and didn't have issue with a self signed cert. > > The instruction to sign lldb are available here. The interesting section is the one that start with: > > «The next steps are necessary on SnowLeopard, but are probably because of a bug > how Keychain Access makes certificates. > [Note: These also apply for Lion.]» > > > > > https://llvm.org/svn/llvm-project/lldb/trunk/docs/code-signing.txt > > You may have a look at what it does, and > Le 12 oct. 2011 à 21:00, Brian Bergstrand a écrit : > >> IIRC, a self-signed cert is not acceptable. The same is true for persistent Keychain Access. You must sign with a cert that was created by a system-recognized CA. >> >> On Oct 12, 2011, at 11:33 AM, Ben Staveley-Taylor wrote: >> >>> I'm trying to use the task_for_pid() mach call. I've found several list posts and other items about the security requirements for this from 10.5 onwards and I believe I'm complying, but I just can't get it to work. Can anyone spot what I'm doing wrong? >>> >>> Setup: >>> ------ >>> >>> - Running on OS X 10.7.1 >>> - I created a new Cocoa application with the code snippets shown below. >>> - Info.plist contains: >>> <key>SecTaskAccess</key> >>> <array> >>> <string>allowed</string> >>> <string>safe</string> >>> </array> >>> - The app is codesigned using a self-signed certificate. >>> >>> Behaviour: >>> ---------- >>> >>> - If I sudo-run the app's executable in Terminal (i.e. Test.app/Contents/MacOS/test) directly, it works >>> - If I do the same without sudo, I get the output: >>> system.privilege.taskport acquired >>> com.apple.TextEdit pid is 2475 >>> Failed; machErr=(os/kern) failure (5) >>> >>> - If I run the .app bundle by double-clicking in Finder, or in Terminal using "open Test.app" or "sudo open Test.app" it also fails in the same way. >>> >>> So in the failure cases I'm told that I do have system.privilege.taskport rights, but task_for_pid() then fails. What vital step am I missing? >>> >>> Many thanks if you can help, >>> >>> Ben Staveley-Taylor >>> ben.staveley-taylor(a)oracle.com >>> >>> >>> >>> >>> Code: >>> ----- >>> >>> ProcessSerialNumber psn; >>> >>> // Get pid of TextEdit, assuming it is running >>> NSString *targetProcessBundle = @"com.apple.TextEdit"; >>> if (FindPSNForBundleID(targetProcessBundle, &psn) == noErr) { >>> >>> // I don't think this should be necessary, but done for verification >>> OSStatus osErr = AcquireTaskportRight(); >>> >>> if (osErr == noErr) >>> { >>> // Convert PSN to PID. >>> pid_t pid; >>> GetProcessPID( &psn, &pid ); >>> NSLog(@"%@ pid is %d", targetProcessBundle, pid); >>> >>> mach_port_t remoteTask = 0; >>> mach_error_t machErr = task_for_pid( mach_task_self(), pid, &remoteTask ); >>> >>> if (machErr == 0) { >>> NSLog(@"Success"); >>> } >>> else { >>> const char *msg = mach_error_string(machErr); >>> NSLog(@"Failed; machErr=%s (%d)", msg, (int)machErr); >>> } >>> } >>> } >>> >>> >>> >>> >>> OSStatus AcquireTaskportRight() { >>> >>> OSStatus stat = noErr; >>> AuthorizationItem taskport_item[] = { >>> {"system.privilege.taskport"},0,0,0 >>> }; >>> AuthorizationRights rights = {1, taskport_item}, *out_rights = NULL; >>> AuthorizationRef authRef; >>> AuthorizationFlags auth_flags = kAuthorizationFlagExtendRights | kAuthorizationFlagPreAuthorize; >>> >>> stat = AuthorizationCreate (NULL, kAuthorizationEmptyEnvironment, auth_flags, &authRef); >>> >>> if (stat == errAuthorizationSuccess) { >>> stat = AuthorizationCopyRights ( authRef, &rights, kAuthorizationEmptyEnvironment, auth_flags, &out_rights); >>> } >>> >>> if (stat == errAuthorizationSuccess) { >>> NSLog(@"system.privilege.taskport acquired"); >>> } >>> else { >>> NSLog(@"Failed to acquire system.privilege.taskport right. Error: %d", (int)stat); >>> } >>> >>> return stat; >>> } >>> >>> _______________________________________________ >>> Do not post admin requests to the list. They will be ignored. >>> Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) >>> Help/Unsubscribe/Update your Subscription: >>> http://lists.apple.com/mailman/options/darwin-dev/brian%40classicalguitar.n… >>> >>> This email sent to brian(a)classicalguitar.net >> >> _______________________________________________ >> Do not post admin requests to the list. They will be ignored. >> Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) >> Help/Unsubscribe/Update your Subscription: >> http://lists.apple.com/mailman/options/darwin-dev/devlists%40shadowlab.org >> >> This email sent to devlists(a)shadowlab.org > > -- Jean-Daniel > > > > > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > http://lists.apple.com/mailman/options/darwin-dev/devlists%40shadowlab.org > > This email sent to devlists(a)shadowlab.org -- Jean-Daniel _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: task_for_pid fails with os/kern failure even with system.privilege.taskport
by Jean-Daniel Dupas 13 Oct '11

13 Oct '11

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Not true. It's perfectly possible to use a self signed cert, as long as it is properly installed. I'm using custom lldb build that required to be signed to works, and didn't have issue with a self signed cert. The instruction to sign lldb are available here. The interesting section is the one that start with: «The next steps are necessary on SnowLeopard, but are probably because of a bug how Keychain Access makes certificates. [Note: These also apply for Lion.]» https://llvm.org/svn/llvm-project/lldb/trunk/docs/code-signing.txt You may have a look at what it does, and Le 12 oct. 2011 à 21:00, Brian Bergstrand a écrit : > IIRC, a self-signed cert is not acceptable. The same is true for persistent Keychain Access. You must sign with a cert that was created by a system-recognized CA. > > On Oct 12, 2011, at 11:33 AM, Ben Staveley-Taylor wrote: > >> I'm trying to use the task_for_pid() mach call. I've found several list posts and other items about the security requirements for this from 10.5 onwards and I believe I'm complying, but I just can't get it to work. Can anyone spot what I'm doing wrong? >> >> Setup: >> ------ >> >> - Running on OS X 10.7.1 >> - I created a new Cocoa application with the code snippets shown below. >> - Info.plist contains: >> <key>SecTaskAccess</key> >> <array> >> <string>allowed</string> >> <string>safe</string> >> </array> >> - The app is codesigned using a self-signed certificate. >> >> Behaviour: >> ---------- >> >> - If I sudo-run the app's executable in Terminal (i.e. Test.app/Contents/MacOS/test) directly, it works >> - If I do the same without sudo, I get the output: >> system.privilege.taskport acquired >> com.apple.TextEdit pid is 2475 >> Failed; machErr=(os/kern) failure (5) >> >> - If I run the .app bundle by double-clicking in Finder, or in Terminal using "open Test.app" or "sudo open Test.app" it also fails in the same way. >> >> So in the failure cases I'm told that I do have system.privilege.taskport rights, but task_for_pid() then fails. What vital step am I missing? >> >> Many thanks if you can help, >> >> Ben Staveley-Taylor >> ben.staveley-taylor(a)oracle.com >> >> >> >> >> Code: >> ----- >> >> ProcessSerialNumber psn; >> >> // Get pid of TextEdit, assuming it is running >> NSString *targetProcessBundle = @"com.apple.TextEdit"; >> if (FindPSNForBundleID(targetProcessBundle, &psn) == noErr) { >> >> // I don't think this should be necessary, but done for verification >> OSStatus osErr = AcquireTaskportRight(); >> >> if (osErr == noErr) >> { >> // Convert PSN to PID. >> pid_t pid; >> GetProcessPID( &psn, &pid ); >> NSLog(@"%@ pid is %d", targetProcessBundle, pid); >> >> mach_port_t remoteTask = 0; >> mach_error_t machErr = task_for_pid( mach_task_self(), pid, &remoteTask ); >> >> if (machErr == 0) { >> NSLog(@"Success"); >> } >> else { >> const char *msg = mach_error_string(machErr); >> NSLog(@"Failed; machErr=%s (%d)", msg, (int)machErr); >> } >> } >> } >> >> >> >> >> OSStatus AcquireTaskportRight() { >> >> OSStatus stat = noErr; >> AuthorizationItem taskport_item[] = { >> {"system.privilege.taskport"},0,0,0 >> }; >> AuthorizationRights rights = {1, taskport_item}, *out_rights = NULL; >> AuthorizationRef authRef; >> AuthorizationFlags auth_flags = kAuthorizationFlagExtendRights | kAuthorizationFlagPreAuthorize; >> >> stat = AuthorizationCreate (NULL, kAuthorizationEmptyEnvironment, auth_flags, &authRef); >> >> if (stat == errAuthorizationSuccess) { >> stat = AuthorizationCopyRights ( authRef, &rights, kAuthorizationEmptyEnvironment, auth_flags, &out_rights); >> } >> >> if (stat == errAuthorizationSuccess) { >> NSLog(@"system.privilege.taskport acquired"); >> } >> else { >> NSLog(@"Failed to acquire system.privilege.taskport right. Error: %d", (int)stat); >> } >> >> return stat; >> } >> >> _______________________________________________ >> Do not post admin requests to the list. They will be ignored. >> Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) >> Help/Unsubscribe/Update your Subscription: >> http://lists.apple.com/mailman/options/darwin-dev/brian%40classicalguitar.n… >> >> This email sent to brian(a)classicalguitar.net > > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > http://lists.apple.com/mailman/options/darwin-dev/devlists%40shadowlab.org > > This email sent to devlists(a)shadowlab.org -- Jean-Daniel _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Open Source Release: OS X 10.7.2, Xcode 4.2, iOS 5.0
by William Siegrist 12 Oct '11

12 Oct '11

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com The open source components for OS X 10.7.2, Xcode 4.2, and iOS 5.0 have been posted to the open source website. http://opensource.apple.com/ Thank you, William Siegrist Apple Inc. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: task_for_pid fails with os/kern failure even with system.privilege.taskport
by Brian Bergstrand 12 Oct '11

12 Oct '11

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha1; c=relaxed; d=classicalguitar.net; h= subject:mime-version:content-type:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; s= classicalguitar.net; bh=rKRJIECSDkogwj2asIQIZFqXA6s=; b=KS/dkXH+ 1oov80MXy/N9Ye+Yrxz4TS/jJ5Z+9zLVzyqjxKY1RU4fqH+vaOkzH4/zqeE40Qqj 7tJUrYlJCe3NImFxK9sxSNZ3DisFQbeEj/uQp8lZ1DPcwA1HoKzMXATBWqcsDlnD sTWaJagLGJ9q/TOiTs0yS9ExuavBPtkO3ms= Domainkey-signature: a=rsa-sha1; c=nofws; d=classicalguitar.net; h=subject :mime-version:content-type:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; q=dns; s= classicalguitar.net; b=Go7y/9/U776lv0MDlJpfDKmkkMxZ0oxCyDPwizKfV DOli7lG6fWhPjoFvKon31T/IMeoMLdgCQ8queYGpGgylr2HEhVb7CXp2NOkkj1Fr y/c/2bqpVHKj6u5MSdzprG71cmk917c4FGf/W/ScMvT6edxTrbkY9/dK5gZBoV1j 5o= IIRC, a self-signed cert is not acceptable. The same is true for persistent Keychain Access. You must sign with a cert that was created by a system-recognized CA. On Oct 12, 2011, at 11:33 AM, Ben Staveley-Taylor wrote: > I'm trying to use the task_for_pid() mach call. I've found several list posts and other items about the security requirements for this from 10.5 onwards and I believe I'm complying, but I just can't get it to work. Can anyone spot what I'm doing wrong? > > Setup: > ------ > > - Running on OS X 10.7.1 > - I created a new Cocoa application with the code snippets shown below. > - Info.plist contains: > <key>SecTaskAccess</key> > <array> > <string>allowed</string> > <string>safe</string> > </array> > - The app is codesigned using a self-signed certificate. > > Behaviour: > ---------- > > - If I sudo-run the app's executable in Terminal (i.e. Test.app/Contents/MacOS/test) directly, it works > - If I do the same without sudo, I get the output: > system.privilege.taskport acquired > com.apple.TextEdit pid is 2475 > Failed; machErr=(os/kern) failure (5) > > - If I run the .app bundle by double-clicking in Finder, or in Terminal using "open Test.app" or "sudo open Test.app" it also fails in the same way. > > So in the failure cases I'm told that I do have system.privilege.taskport rights, but task_for_pid() then fails. What vital step am I missing? > > Many thanks if you can help, > > Ben Staveley-Taylor > ben.staveley-taylor(a)oracle.com > > > > > Code: > ----- > > ProcessSerialNumber psn; > > // Get pid of TextEdit, assuming it is running > NSString *targetProcessBundle = @"com.apple.TextEdit"; > if (FindPSNForBundleID(targetProcessBundle, &psn) == noErr) { > > // I don't think this should be necessary, but done for verification > OSStatus osErr = AcquireTaskportRight(); > > if (osErr == noErr) > { > // Convert PSN to PID. > pid_t pid; > GetProcessPID( &psn, &pid ); > NSLog(@"%@ pid is %d", targetProcessBundle, pid); > > mach_port_t remoteTask = 0; > mach_error_t machErr = task_for_pid( mach_task_self(), pid, &remoteTask ); > > if (machErr == 0) { > NSLog(@"Success"); > } > else { > const char *msg = mach_error_string(machErr); > NSLog(@"Failed; machErr=%s (%d)", msg, (int)machErr); > } > } > } > > > > > OSStatus AcquireTaskportRight() { > > OSStatus stat = noErr; > AuthorizationItem taskport_item[] = { > {"system.privilege.taskport"},0,0,0 > }; > AuthorizationRights rights = {1, taskport_item}, *out_rights = NULL; > AuthorizationRef authRef; > AuthorizationFlags auth_flags = kAuthorizationFlagExtendRights | kAuthorizationFlagPreAuthorize; > > stat = AuthorizationCreate (NULL, kAuthorizationEmptyEnvironment, auth_flags, &authRef); > > if (stat == errAuthorizationSuccess) { > stat = AuthorizationCopyRights ( authRef, &rights, kAuthorizationEmptyEnvironment, auth_flags, &out_rights); > } > > if (stat == errAuthorizationSuccess) { > NSLog(@"system.privilege.taskport acquired"); > } > else { > NSLog(@"Failed to acquire system.privilege.taskport right. Error: %d", (int)stat); > } > > return stat; > } > > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > http://lists.apple.com/mailman/options/darwin-dev/brian%40classicalguitar.n… > > This email sent to brian(a)classicalguitar.net _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

task_for_pid fails with os/kern failure even with system.privilege.taskport
by Ben Staveley-Taylor 12 Oct '11

12 Oct '11

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com I'm trying to use the task_for_pid() mach call. I've found several list posts and other items about the security requirements for this from 10.5 onwards and I believe I'm complying, but I just can't get it to work. Can anyone spot what I'm doing wrong? Setup: ------ - Running on OS X 10.7.1 - I created a new Cocoa application with the code snippets shown below. - Info.plist contains: <key>SecTaskAccess</key> <array> <string>allowed</string> <string>safe</string> </array> - The app is codesigned using a self-signed certificate. Behaviour: ---------- - If I sudo-run the app's executable in Terminal (i.e. Test.app/Contents/MacOS/test) directly, it works - If I do the same without sudo, I get the output: system.privilege.taskport acquired com.apple.TextEdit pid is 2475 Failed; machErr=(os/kern) failure (5) - If I run the .app bundle by double-clicking in Finder, or in Terminal using "open Test.app" or "sudo open Test.app" it also fails in the same way. So in the failure cases I'm told that I do have system.privilege.taskport rights, but task_for_pid() then fails. What vital step am I missing? Many thanks if you can help, Ben Staveley-Taylor ben.staveley-taylor(a)oracle.com Code: ----- ProcessSerialNumber psn; // Get pid of TextEdit, assuming it is running NSString *targetProcessBundle = @"com.apple.TextEdit"; if (FindPSNForBundleID(targetProcessBundle, &psn) == noErr) { // I don't think this should be necessary, but done for verification OSStatus osErr = AcquireTaskportRight(); if (osErr == noErr) { // Convert PSN to PID. pid_t pid; GetProcessPID( &psn, &pid ); NSLog(@"%@ pid is %d", targetProcessBundle, pid); mach_port_t remoteTask = 0; mach_error_t machErr = task_for_pid( mach_task_self(), pid, &remoteTask ); if (machErr == 0) { NSLog(@"Success"); } else { const char *msg = mach_error_string(machErr); NSLog(@"Failed; machErr=%s (%d)", msg, (int)machErr); } } } OSStatus AcquireTaskportRight() { OSStatus stat = noErr; AuthorizationItem taskport_item[] = { {"system.privilege.taskport"},0,0,0 }; AuthorizationRights rights = {1, taskport_item}, *out_rights = NULL; AuthorizationRef authRef; AuthorizationFlags auth_flags = kAuthorizationFlagExtendRights | kAuthorizationFlagPreAuthorize; stat = AuthorizationCreate (NULL, kAuthorizationEmptyEnvironment, auth_flags, &authRef); if (stat == errAuthorizationSuccess) { stat = AuthorizationCopyRights ( authRef, &rights, kAuthorizationEmptyEnvironment, auth_flags, &out_rights); } if (stat == errAuthorizationSuccess) { NSLog(@"system.privilege.taskport acquired"); } else { NSLog(@"Failed to acquire system.privilege.taskport right. Error: %d", (int)stat); } return stat; } _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0